CHANGELOG

CHANGELOG.md

@@ -1,4 +1,57 @@
-## 1.231.1 (Unreleased)
+## 1.232.0 (Unreleased)
+
+- **New Resource:** `alicloud_sls_collection_policy` [GH-7727]
+- **New Resource:** `alicloud_gpdb_database` [GH-7753]
+
+ENHANCEMENTS:
+
+- client: Updates credential for supportting it refresh sts token automatically. [GH-7715]
+- client: Improved dds client. [GH-7719]
+- resource/alicloud_service_mesh_service_mesh: Add attributes related to Kiali. [GH-7674]
+- resource/alicloud_eci_container_group: Support dns policy. [GH-7682]
+- resource/alicloud_ess_eci_scaling_configuration: add attributes of cost_optimization, instance_family_level, security_context_sysctls.N.name, security_context_sysctls.N.value, dns_config_options.N.name, dns_config_options.N.value, empty_dir_volume_size_limit, empty_dir_volume_medium, config_file_volume_default_mode, host_path_volume_path, host_path_volume_type, config_file_volume_config_file_to_path.mode, container.N.volume_mounts.N.mount_propagation, container.N.volume_mounts.N.sub_path, init_container.N.volume_mounts.N.mount_propagation, init_container.N.volume_mounts.N.sub_path, container.N.tty and container.N.stdin. [GH-7689]
+- resource/alicloud_ess_scaling_configuration: add security_enhancement_strategy, instance_description, system_disk_kms_key_id, spot_duration, system_disk_encrypt_algorithm, image_options_login_as_non_root, deletion_protection, system_disk_provisioned_iops and provisioned_iops of data_disk. [GH-7691]
+- resource/alicloud_cloud_firewall_instance: Supported for new action CreateSlsLogDispatch, DescribeUserBuyVersion. [GH-7717]
+- resource/alicloud_kvstore_instance: Supported for new action ModifyInstanceBandwidth. [GH-7720]
+- resource/alicloud_polardb_cluster: modified support compress_storage. [GH-7722]
+- resource/alicloud_polardb_cluster: modified support loose_xengine and loose_xengine_use_memory_pct. [GH-7724]
+- resource/alicloud_instance: Added the field password_inherit, create_time, start_time, expired_time. [GH-7728]
+- resource/alicloud_ga_endpoint_group: Added the field sub_address; Supported type set to ALB, NLB, ENI, OSS. [GH-7730]
+- resource/alicloud_db_instance: Restoring the usage of a three node RDS. [GH-7733]
+- resource/alicloud_ecs_launch_template: add new attribute http_endpoint, http_tokens and http_put_response_hop_limit; data-source/alicloud_ecs_launch_templates: add new attributes http_endpoint, http_tokens and http_put_response_hop_limit. [GH-7735]
+- resource/alicloud_privatelink_vpc_endpoint_zone: add retry code for create and delete operation. [GH-7743]
+- resource/alicloud_threat_detection_instance: add new attributes threat_analysis_flow, threat_analysis_sls_storage and threat_analysis_switch1. [GH-7744]
+- resource/alicloud_privatelink_vpc_endpoint_service_user: add new attribute user_arn. [GH-7747]
+- resource/alicloud_cloud_firewall_control_policy: Added the field domain_resolve_type, repeat_type, start_time, end_time, repeat_start_time, repeat_end_time, repeat_days, application_name_list, create_time. [GH-7748]
+- resource/alicloud_privatelink_vpc_endpoint_service_resource: add retry code for delete operation. [GH-7749]
+- resource/alicloud_gpdb_instance: Add computed tag for description. [GH-7752]
+- resource/alicloud_snat_entry: add retry for CreateSnatEntry. [GH-7760]
+- resource/alicloud_ecs_disk: Removed the ConflictsWith for encrypted, snapshot_id; Improved the document ecs_disk. [GH-7764]
+- resource/alicloud_cs_managed_kubernetes: support operation_policy, update maintenance_window attributes, deprecated load_balancer_spec; resource/alicloud_cs_serverless_kubernetes: support operation_policy, maintenance_window; resource/alicloud_cs_kubernetes: deprecated load_balancer_spec. [GH-7766]
+- resource/alicloud_amqp_instance: Mark max_eip_tps as Computed and improve doc. [GH-7767]
+- resource/alicloud_amqp_instance: Mark max_eip_tps as Computed and improve doc. [GH-7768]
+- resource/alicloud_cs_kubernetes_node_pool: support pre_user_data. [GH-7769]
+- resource/alicloud_alb_rule: Added retry strategy for error code -21013. [GH-7771]
+- resource/alicloud_cen_instance: Added the field resource_group_id; Improved alicloud_cen_instance testcase. [GH-7772]
+- data-source/alicloud_mse_clusters: update datasource test and docs;resource/alicloud_mse_cluster: add new mse_version mse_serverless and connection_type single_eni; resource/alicloud_mse_engine_namespace: add new attribute cluster_id and update docs; data-source/alicloud_mse_engine_namespaces: add new attribute instance_id and update docs. [GH-7671]
+- data-source/alicloud_mse_engine_namespaces: recover cluster_id forcenew. [GH-7731]
+- data-source/alicloud_ssl_certificates_service_certificates: Added the field keyword; Deprecated the field lang; Updated action DescribeUserCertificateList to ListUserCertificateOrder to improve the read. [GH-7741]
+- data-source/alicloud_privatelink_vpc_endpoint_services: support attribute tags. [GH-7756]
+- data-source/alicloud_resource_manager_folders: Added retry strategy; Improved alicloud_resource_manager_folders testcase and document. [GH-7763]
+- docs: Improves available version for service_mesh. [GH-7721]
+- docs: add whitelist note for alicloud_dbfs_instance. [GH-7742]
+- docs: Fixed invalid links; Improved subcategory for NAS. [GH-7754]
+- docs: Fix invalid argument name for cs_serverless_kubernetes_clusters. [GH-7765]
+- testcase: Add cases for sls_collection_policy. [GH-7773]
+- testcase: Fix case for quotas_template_applications. [GH-7774]
+
+BUG FIXES:
+
+- resource/alicloud_ecp_instance: Fixed the read error; Added the ForceNew for field eip_bandwidth, payment_type; Removed the ForceNew for field resolution; Improved alicloud_ecp_instance testcase. [GH-7726]
+- resource/alicloud_hbr_policy_binding: resolve pagesize bug for hbr_policy_bingding. [GH-7729]
+- resource/alicloud_privatelink_vpc_endpoint_zone: Silent error reporting while delete unexist instance. [GH-7746]
+- resource/alicloud_eais_instance: Fixed the import error caused by field vswitch_id and security_group_id no value; Fixed the diff error caused by field instance_name. [GH-7770]
+
 ## 1.231.0 (September 27, 2024)
 
 - **New Resource:** `alicloud_gpdb_streaming_job` ([#7699](https://github.com/aliyun/terraform-provider-alicloud/issues/7699))

alicloud/connectivity/client.go

@@ -182,7 +182,7 @@ var loadSdkfromRemoteMutex = sync.Mutex{}
 var loadSdkEndpointMutex = sync.Mutex{}
 
 // The main version number that is being run at the moment.
-var providerVersion = "1.231.0"
+var providerVersion = "1.232.0"
 
 // Temporarily maintain map for old ecs client methods and store special endpoint information
 var EndpointMap = map[string]string{

alicloud/data_source_alicloud_ssl_certificates_service_certificates.go

@@ -133,7 +133,7 @@ func dataSourceAliCloudSslCertificatesServiceCertificates() *schema.Resource {
 			"lang": {
 				Type:       schema.TypeString,
 				Optional:   true,
-				Deprecated: "Field `lang` has been deprecated from provider version 1.231.1.",
+				Deprecated: "Field `lang` has been deprecated from provider version 1.232.0.",
 			},
 		},
 	}

website/docs/d/ssl_certificates_service_certificates.html.markdown

@@ -94,10 +94,10 @@ The following arguments are supported:
 
 * `ids` - (Optional, ForceNew, List) A list of Ssl Certificates IDs.
 * `name_regex` - (Optional, ForceNew) A regex string to filter results by Ssl Certificates name.
-* `keyword` - (Optional, ForceNew, Available since v1.231.1) The domain name that is bound or the ID of the resource. Fuzzy match is supported.
+* `keyword` - (Optional, ForceNew, Available since v1.232.0) The domain name that is bound or the ID of the resource. Fuzzy match is supported.
 * `enable_details` - (Optional, Bool) Whether to query the detailed list of resource attributes. Default value: `false`.
 * `output_file` - (Optional) File name where to save data source results (after running `terraform plan`).
-* `lang` - (Optional, ForceNew, Deprecated since v1.231.1) The language of the content within the request and response. **Note:** Field `lang` has been deprecated from provider version 1.231.1.
+* `lang` - (Optional, ForceNew, Deprecated since v1.232.0) The language of the content within the request and response. **Note:** Field `lang` has been deprecated from provider version 1.232.0.
 
 ## Attributes Reference
 
@@ -121,5 +121,5 @@ The following attributes are exported in addition to the arguments listed above:
   * `end_date` - The time at which the certificate expires.
   * `cert` - The Cert of the certificate. **Note:** `cert` takes effect only if `enable_details` is set to `true`.
   * `key` - The Key of the certificate. **Note:** `key` takes effect only if `enable_details` is set to `true`.
-  * `buy_in_aliyun` - Whether the certificate was purchased from Aliyun. **Note:** From version 1.231.1, `buy_in_aliyun` takes effect only if `enable_details` is set to `true`.
+  * `buy_in_aliyun` - Whether the certificate was purchased from Aliyun. **Note:** From version 1.232.0, `buy_in_aliyun` takes effect only if `enable_details` is set to `true`.
   * `name` - (Deprecated since v1.129.0) The name of the certificate. **Note:** Field `name` has been deprecated from provider version 1.129.0. New field `certificate_name` instead.

website/docs/r/cen_instance.html.markdown

@@ -40,7 +40,7 @@ resource "alicloud_cen_instance" "default" {
 The following arguments are supported:
 
 * `protection_level` - (Optional, Available since v1.76.0) The level of CIDR block overlapping. Default value: `REDUCE`.
-* `resource_group_id` - (Optional, Available since v1.231.1) The ID of the resource group. **Note:** Once you set a value of this property, you cannot set it to an empty string anymore.
+* `resource_group_id` - (Optional, Available since v1.232.0) The ID of the resource group. **Note:** Once you set a value of this property, you cannot set it to an empty string anymore.
 * `cen_instance_name` - (Optional, Available since v1.98.0) The name of the CEN Instance. The name can be empty or `1` to `128` characters in length and cannot start with `http://` or `https://`.
 * `description` - (Optional) The description of the CEN Instance. The description can be empty or `1` to `256` characters in length and cannot start with `http://` or `https://`.
 * `tags` - (Optional, Available since v1.80.0) A mapping of tags to assign to the resource.

website/docs/r/cloud_firewall_control_policy.html.markdown

@@ -63,28 +63,28 @@ The following arguments are supported:
 * `ip_version` - (Optional, ForceNew) The IP version supported by the access control policy. Default value: `4`. Valid values:
   - `4`: IPv4.
   - `6`: IPv6.
-* `domain_resolve_type` - (Optional, Available since v1.231.1) The domain name resolution method of the access control policy. Valid values:
+* `domain_resolve_type` - (Optional, Available since v1.232.0) The domain name resolution method of the access control policy. Valid values:
   - `FQDN`: Fully qualified domain name (FQDN)-based resolution.
   - `DNS`: DNS-based dynamic resolution.
   - `FQDN_AND_DNS`: FQDN and DNS-based dynamic resolution.
-* `repeat_type` - (Optional, Available since v1.231.1) The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
+* `repeat_type` - (Optional, Available since v1.232.0) The recurrence type for the access control policy to take effect. Default value: `Permanent`. Valid values:
   - `Permanent`: The policy always takes effect.
   - `None`: The policy takes effect for only once.
   - `Daily`: The policy takes effect on a daily basis.
   - `Weekly`: The policy takes effect on a weekly basis.
   - `Monthly`: The policy takes effect on a monthly basis.
-* `start_time` - (Optional, Int, Available since v1.231.1) The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
-* `end_time` - (Optional, Int, Available since v1.231.1) The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+* `start_time` - (Optional, Int, Available since v1.232.0) The time when the access control policy starts to take effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+* `end_time` - (Optional, Int, Available since v1.232.0) The time when the access control policy stops taking effect. The value is a UNIX timestamp. Unit: seconds. The value must be on the hour or on the half hour, and at least 30 minutes later than the start time.
 -> **NOTE:** If `repeat_type` is set to `None`, `Daily`, `Weekly`, or `Monthly`, `start_time` and `end_time` must be set.
-* `repeat_start_time` - (Optional, Available since v1.231.1) The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
-* `repeat_end_time` - (Optional, Available since v1.231.1) The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
+* `repeat_start_time` - (Optional, Available since v1.232.0) The point in time when the recurrence starts. Example: `08:00`. The start time must be on the hour or on the half hour, and at least 30 minutes earlier than the end time.
+* `repeat_end_time` - (Optional, Available since v1.232.0) The point in time when the recurrence ends. Example: `23:30`. The end time must be on the hour or on the half hour, and at least 30 minutes later than the start time.
 -> **NOTE:** If `repeat_type` is set to `Daily`, `Weekly`, or `Monthly`, `repeat_start_time` and `repeat_end_time` must be set.
-* `repeat_days` - (Optional, List, Available since v1.231.1) The days of a week or of a month on which the access control policy takes effect. Valid values:
+* `repeat_days` - (Optional, List, Available since v1.232.0) The days of a week or of a month on which the access control policy takes effect. Valid values:
   - If `repeat_type` is set to `Weekly`. Valid values: `0` to `6`.
   - If `repeat_type` is set to `Monthly`. Valid values: `1` to `31`.
 -> **NOTE:** If `repeat_type` is set to `Weekly`, or `Monthly`, `repeat_days` must be set.
-* `application_name_list` - (Optional, List, Available since v1.231.1) The application types supported by the access control policy.
--> **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.231.1, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
+* `application_name_list` - (Optional, List, Available since v1.232.0) The application types supported by the access control policy.
+-> **NOTE:** If `proto` is set to `TCP`, you can set `application_name_list` to any valid value. If `proto` is set to `UDP`, `ICMP`, or `ANY`, you can only set `application_name_list` to `["ANY"]`. From version 1.232.0, You must specify at least one of the `application_name_list` and `application_name`. If you specify both `application_name_list` and `application_name`, only the `application_name_list` takes effect.
 * `release` - (Optional) The status of the access control policy. Valid values: `true`, `false`.
 * `source_ip` - (Optional) The source IP address of the request.
 * `lang` - (Optional) The language of the content within the request and response. Valid values: `zh`, `en`.
@@ -95,11 +95,11 @@ The following attributes are exported:
 
 * `id` - The resource ID in terraform of Control Policy. It formats as `<acl_uuid>:<direction>`.
 * `acl_uuid` - (Available since v1.148.0) The unique ID of the access control policy.
-* `create_time` - (Available since v1.231.1) The time when the access control policy was created.
+* `create_time` - (Available since v1.232.0) The time when the access control policy was created.
 
 ## Timeouts
 
--> **NOTE:** Available since v1.231.1.
+-> **NOTE:** Available since v1.232.0.
 
 The `timeouts` block allows you to specify [timeouts](https://www.terraform.io/docs/configuration-0-11/resources.html#timeouts) for certain actions:
 

website/docs/r/cloud_firewall_instance.html.markdown

@@ -71,8 +71,8 @@ The following arguments are supported:
 * `modify_type` - (Optional) The type of modification. Valid values: `Upgrade`, `Downgrade`. **NOTE:** The `modify_type` is required when you execute an update operation.
 * `cfw_service` - (Removed since v1.209.1) Attribute `cfw_service` does not support longer, and it has been removed since v1.209.1.
 * `spec` - (Optional) Current version. Valid values: `premium_version`, `enterprise_version`,`ultimate_version`.
-* `cfw_log` - (Optional) Whether to use log audit. Valid values: `true`, `false`. **NOTE:** From version 1.231.1, When `payment_type` is set to `PayAsYouGo`, `cfw_log` can only be set to `true`, `cfw_log` cannot be modified to `false`.
-* `cfw_log_storage` - (Optional) The log storage capacity. **NOTE:** From version 1.231.1, When `payment_type` is set to `PayAsYouGo`, or `cfw_log` is set to `false`, `cfw_log_storage` will be ignored.
+* `cfw_log` - (Optional) Whether to use log audit. Valid values: `true`, `false`. **NOTE:** From version 1.232.0, When `payment_type` is set to `PayAsYouGo`, `cfw_log` can only be set to `true`, `cfw_log` cannot be modified to `false`.
+* `cfw_log_storage` - (Optional) The log storage capacity. **NOTE:** From version 1.232.0, When `payment_type` is set to `PayAsYouGo`, or `cfw_log` is set to `false`, `cfw_log_storage` will be ignored.
   * `premium_version` - The valid cfw_log_storage is [1000, 500000] with the step size 1000. Default Value: `1000`. Unit: GB.
   * `enterprise_version` - The valid cfw_log_storage is [3000, 500000] with the step size 1000. Default Value: `3000`. Unit: GB.
   * `ultimate_version` - The valid cfw_log_storage is [5000, 500000] with the step size 1000. Default Value: `5000`. Unit: GB.
@@ -98,7 +98,7 @@ The following arguments are supported:
 
 The following attributes are exported:
 
-* `user_status` - (Available since v1.231.1) The user status of Cloud Firewall Instance.
+* `user_status` - (Available since v1.232.0) The user status of Cloud Firewall Instance.
 * `status` - The status of Cloud Firewall Instance.
 * `create_time` - The creation time.
 * `end_time` - The end time.

website/docs/r/db_instance.html.markdown

@@ -658,7 +658,7 @@ The following arguments are supported:
 
 -> **NOTE:** For more information about minor engine versions, see Release notes of minor AliPG versions, Release notes of minor AliSQL versions, and Release notes of minor engine versions of ApsaraDB RDS for SQL Server.
 * `zone_id_slave_a` - (Optional, ForceNew, Available since 1.101.0) The region ID of the secondary instance if you create a secondary instance. If you set this parameter to the same value as the ZoneId parameter, the instance is deployed in a single zone. Otherwise, the instance is deployed in multiple zones.
-* `zone_id_slave_b` - (Optional, ForceNew, Available since 1.231.1) RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
+* `zone_id_slave_b` - (Optional, ForceNew, Available since 1.232.0) RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
 * `ssl_action` - (Optional, Available since v1.90.0) Actions performed on SSL functions. Valid values: 
   `Open`: turn on SSL encryption; 
   `Close`: turn off SSL encryption;